This is an old revision of the document!
<?php
if(!defined('DOKU_INC')) define('DOKU_INC',dirname(FILE).'/'); if(!defined('DOKU_CONF')) define('DOKU_CONF',DOKU_INC.'conf/'); if(!defined('DOKU_LOCAL')) define('DOKU_LOCAL',DOKU_INC.'conf/');
load and initialize the core system require_once(DOKU_INC.'inc/init.php'); check for error reporting override or set error reporting to sane values if (!defined('DOKU_E_LEVEL')) { error_reporting(E_ALL ^ E_NOTICE); } else { error_reporting(DOKU_E_LEVEL); }
language strings
require_once(DOKU_INC.'inc/lang/en/lang.php');
if(isset($_REQUEST['l']) && !is_array($_REQUEST['l'])) {
$LC = preg_replace('/[^a-z\-]+/',,$_REQUEST['l']);
}
if(empty($LC)) $LC = 'en';
if($LC && $LC != 'en' ) {
require_once(DOKU_INC.'inc/lang/'.$LC.'/lang.php');
}
initialise variables …
$error = array();
begin output
header('Content-Type: text/html; charset=utf-8');
?>
<!DOCTYPE html>
<html lang=“<?php echo $LC?>” dir=“<?php echo $lang['direction']?>”>
<head>
<meta charset=“utf-8” />
<title><?php echo $lang['i_installer']?></title>
<style>
body { width: 90%; margin: 0 auto; font: 84% Verdana, Helvetica, Arial, sans-serif; }
img { border: none }
br.cl { clear:both; }
code { font-size: 110%; color: #800000; }
fieldset { border: none }
label { display: block; margin-top: 0.5em; }
select.text, input.text { width: 30em; margin: 0 0.5em; }
a {text-decoration: none}
</style>
<script>
function acltoggle(){
var cb = document.getElementById('acl');
var fs = document.getElementById('acldep');
if(!cb || !fs) return;
if(cb.checked){
fs.style.display =
;
}else{
fs.style.display = 'none';
}
}
window.onload = function(){
acltoggle();
var cb = document.getElementById('acl');
if(cb) cb.onchange = acltoggle;
};
</script>
</head>
<body style=“”>
<h1 style=“float:left”>
<img src=“lib/exe/fetch.php?media=wiki:dokuwiki-128.png”
style=“vertical-align: middle;” alt=“” height=“64” width=“64” />
<?php echo $lang['i_installer']?>
</h1>
<?php langsel()?> </div> <br class="cl" />
<div style="float: right; width: 34%;"> <?php if(file_exists(DOKU_INC.'inc/lang/'.$LC.'/install.html')){ include(DOKU_INC.'inc/lang/'.$LC.'/install.html'); }else{ print "<div lang=\"en\" dir=\"ltr\">\n"; include(DOKU_INC.'inc/lang/en/install.html'); print "</div>\n"; } ?> <a style=" background: transparent url(data/dont-panic-if-you-see-this-in-your-logs-it-means-your-directory-permissions-are-correct.png) left top no-repeat; display: block; width:380px; height:73px; border:none; clear:both;" target="_blank" href="http://www.dokuwiki.org/security#web_access_security"></a> </div>
<div style="float: left; width: 58%;"> <?php try { if(! (check_functions() && check_permissions()) ){ echo '<p>'.$lang['i_problems'].'</p>'; print_errors(); print_retry(); }elseif(!check_configs()){ echo '<p>'.$lang['i_modified'].'</p>'; print_errors(); }elseif(check_data($_REQUEST['d'])){ // check_data has sanitized all input parameters if(!store_data($_REQUEST['d'])){ echo '<p>'.$lang['i_failure'].'</p>'; print_errors(); }else{ echo '<p>'.$lang['i_success'].'</p>'; } }else{ print_errors(); print_form($_REQUEST['d']); } } catch (Exception $e) { echo 'Caught exception: ', $e->getMessage(), "\n"; } ?> </div>
<a href="http://dokuwiki.org/"><img src="lib/tpl/dokuwiki/images/button-dw.png" alt="driven by DokuWiki" /></a> <a href="http://php.net"><img src="lib/tpl/dokuwiki/images/button-php.gif" alt="powered by PHP" /></a>
</body> </html> <?php function print_form($d){
global $lang; global $LC;
include(DOKU_CONF.'license.php');
if(!is_array($d)) $d = array(); $d = array_map('hsc',$d);
if(!isset($d['acl'])) $d['acl']=1; if(!isset($d['pop'])) $d['pop']=1;
?> <form action="" method="post"> <input type="hidden" name="l" value="<?php echo $LC ?>" /> <fieldset> <label for="title"><?php echo $lang['i_wikiname']?> <input type="text" name="d[title]" id="title" value="<?php echo $d['title'] ?>" style="width: 20em;" /> </label>
<fieldset style="margin-top: 1em;"> <label for="acl"> <input type="checkbox" name="d[acl]" id="acl" <?php echo(($d['acl'] ? ' checked="checked"' : ''));?> /> <?php echo $lang['i_enableacl']?></label>
<fieldset id="acldep"> <label for="superuser"><?php echo $lang['i_superuser']?></label> <input class="text" type="text" name="d[superuser]" id="superuser" value="<?php echo $d['superuser'] ?>" />
<label for="fullname"><?php echo $lang['fullname']?></label> <input class="text" type="text" name="d[fullname]" id="fullname" value="<?php echo $d['fullname'] ?>" />
<label for="email"><?php echo $lang['email']?></label> <input class="text" type="text" name="d[email]" id="email" value="<?php echo $d['email'] ?>" />
<label for="password"><?php echo $lang['pass']?></label> <input class="text" type="password" name="d[password]" id="password" />
<label for="confirm"><?php echo $lang['passchk']?></label> <input class="text" type="password" name="d[confirm]" id="confirm" />
<label for="policy"><?php echo $lang['i_policy']?></label> <select class="text" name="d[policy]" id="policy"> <option value="0" <?php echo ($d['policy'] == 0)?'selected="selected"':'' ?>><?php echo $lang['i_pol0']?></option> <option value="1" <?php echo ($d['policy'] == 1)?'selected="selected"':'' ?>><?php echo $lang['i_pol1']?></option> <option value="2" <?php echo ($d['policy'] == 2)?'selected="selected"':'' ?>><?php echo $lang['i_pol2']?></option> </select>
<label for="allowreg"> <input type="checkbox" name="d[allowreg]" id="allowreg" <?php echo(($d['allowreg'] ? ' checked="checked"' : ''));?> /> <?php echo $lang['i_allowreg']?> </label> </fieldset> </fieldset>
<fieldset> <p><?php echo $lang['i_license']?></p> <?php array_push($license,array('name' => $lang['i_license_none'], 'url'=>'')); if(empty($d['license'])) $d['license'] = 'cc-by-sa'; foreach($license as $key => $lic){ echo '<label for="lic_'.$key.'">'; echo '<input type="radio" name="d[license]" value="'.hsc($key).'" id="lic_'.$key.'"'. (($d['license'] === $key)?' checked="checked"':'').'>'; echo hsc($lic['name']); if($lic['url']) echo ' <a href="'.$lic['url'].'" target="_blank"><sup>[?]</sup></a>'; echo '</label>'; } ?> </fieldset>
<fieldset> <p><?php echo $lang['i_pop_field']?></p> <label for="pop"> <input type="checkbox" name="d[pop]" id="pop" <?php echo(($d['pop'] ? ' checked="checked"' : ''));?> /> <?php echo $lang['i_pop_label']?> <a href="http://www.dokuwiki.org/popularity" target="_blank"><sup>[?]</sup></a> </label> </fieldset>
</fieldset> <fieldset id="process"> <button type="submit" name="submit"><?php echo $lang['btn_save']?></button> </fieldset> </form> <?php
}
function print_retry() {
global $lang; global $LC; ?> <form action="" method="get"> <fieldset> <input type="hidden" name="l" value="<?php echo $LC ?>" /> <button type="submit"><?php echo $lang['i_retry'];?></button> </fieldset> </form> <?php
} function check_data(&$d){
static $form_default = array( 'title' => '', 'acl' => '1', 'superuser' => '', 'fullname' => '', 'email' => '', 'password' => '', 'confirm' => '', 'policy' => '0', 'allowreg' => '0', 'license' => 'cc-by-sa' ); global $lang; global $error;
if(!is_array($d)) $d = array(); foreach($d as $k => $v) { if(is_array($v)) unset($d[$k]); else $d[$k] = (string)$v; }
//autolowercase the username $d['superuser'] = isset($d['superuser']) ? strtolower($d['superuser']) : "";
$ok = false;
if(isset($_REQUEST['submit'])) { $ok = true;
// check input if(empty($d['title'])){ $error[] = sprintf($lang['i_badval'],$lang['i_wikiname']); $ok = false; } if(isset($d['acl'])){ if(!preg_match('/^[a-z0-9_]+$/',$d['superuser'])){ $error[] = sprintf($lang['i_badval'],$lang['i_superuser']); $ok = false; } if(empty($d['password'])){ $error[] = sprintf($lang['i_badval'],$lang['pass']); $ok = false; } elseif(!isset($d['confirm']) || $d['confirm'] != $d['password']){ $error[] = sprintf($lang['i_badval'],$lang['passchk']); $ok = false; } if(empty($d['fullname']) || strstr($d['fullname'],':')){ $error[] = sprintf($lang['i_badval'],$lang['fullname']); $ok = false; } if(empty($d['email']) || strstr($d['email'],':') || !strstr($d['email'],'@')){ $error[] = sprintf($lang['i_badval'],$lang['email']); $ok = false; } }else{ // Since default = 1, browser won't send acl=0 when user untick acl $d['acl'] = '0'; } } $d = array_merge($form_default, $d); return $ok;
} function store_data($d){
global $LC; $ok = true; $d['policy'] = (int) $d['policy'];
// create local.php $now = gmdate('r'); $output = <<<EOT
<?php
EOT;
// add any config options set by a previous installer $preset = __DIR__.'/install.conf'; if(file_exists($preset)){ $output .= "# preset config options\n"; $output .= file_get_contents($preset); $output .= "\n\n"; $output .= "# options selected in installer\n"; @unlink($preset); }
$output .= '$conf[\'title\'] = \''.addslashes($d['title'])."';\n"; $output .= '$conf[\'lang\'] = \''.addslashes($LC)."';\n"; $output .= '$conf[\'license\'] = \''.addslashes($d['license'])."';\n"; if($d['acl']){ $output .= '$conf[\'useacl\'] = 1'.";\n"; $output .= "\$conf['superuser'] = '@admin';\n"; } if(!$d['allowreg']){ $output .= '$conf[\'disableactions\'] = \'register\''.";\n"; } $ok = $ok && fileWrite(DOKU_LOCAL.'local.php',$output);
if ($d['acl']) { // hash the password $phash = new \dokuwiki\PassHash(); $pass = $phash->hash_bcrypt($d['password']);
// create users.auth.php $output = <<<EOT
# users.auth.php # <?php exit()?> # Don't modify the lines above # # Userfile # # Auto-generated by install script # Date: $now # # Format: # login:passwordhash:Real Name:email:groups,comma,separated
EOT;
// --- user:bcryptpasswordhash:Real Name:email:groups,comma,seperated $output = $output."\n".join(":",array($d['superuser'], $pass, $d['fullname'], $d['email'], 'admin,user'))."\n"; $ok = $ok && fileWrite(DOKU_LOCAL.'users.auth.php', $output);
// create acl.auth.php $output = <<<EOT
# acl.auth.php # <?php exit()?> # Don't modify the lines above # # Access Control Lists # # Auto-generated by install script # Date: $now
EOT;
if($d['policy'] == 2){ $output .= "* @ALL 0\n"; $output .= "* @user 8\n"; }elseif($d['policy'] == 1){ $output .= "* @ALL 1\n"; $output .= "* @user 8\n"; }else{ $output .= "* @ALL 8\n"; } $ok = $ok && fileWrite(DOKU_LOCAL.'acl.auth.php', $output); }
// enable popularity submission if($d['pop']){ @touch(DOKU_INC.'data/cache/autosubmit.txt'); }
// disable auth plugins til needed $output = <<<EOT
<?php
\$plugins['authad'] = 0; \$plugins['authldap'] = 0; \$plugins['authmysql'] = 0; \$plugins['authpgsql'] = 0;
EOT;
$ok = $ok && fileWrite(DOKU_LOCAL.'plugins.local.php', $output);
return $ok;
} function fileWrite($filename, $data) {
global $error; global $lang;
if (($fp = @fopen($filename, 'wb')) === false) { $filename = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $filename); $error[] = sprintf($lang['i_writeerr'],$filename); return false; }
if (!empty($data)) { fwrite($fp, $data); } fclose($fp); return true;
} function check_configs(){
global $error; global $lang;
$ok = true;
$config_files = array( 'local' => DOKU_LOCAL.'local.php', 'users' => DOKU_LOCAL.'users.auth.php', 'auth' => DOKU_LOCAL.'acl.auth.php' );
// configs shouldn't exist foreach ($config_files as $file) { if (file_exists($file) && filesize($file)) { $file = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $file); $error[] = sprintf($lang['i_confexists'],$file); $ok = false; } } return $ok;
} function check_permissions(){
global $error; global $lang;
$dirs = array( 'conf' => DOKU_LOCAL, 'data' => DOKU_INC.'data', 'pages' => DOKU_INC.'data/pages', 'attic' => DOKU_INC.'data/attic', 'media' => DOKU_INC.'data/media', 'media_attic' => DOKU_INC.'data/media_attic', 'media_meta' => DOKU_INC.'data/media_meta', 'meta' => DOKU_INC.'data/meta', 'cache' => DOKU_INC.'data/cache', 'locks' => DOKU_INC.'data/locks', 'index' => DOKU_INC.'data/index', 'tmp' => DOKU_INC.'data/tmp' );
$ok = true; foreach($dirs as $dir){ if(!file_exists("$dir/.") || !is_writable($dir)){ $dir = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}', $dir); $error[] = sprintf($lang['i_permfail'],$dir); $ok = false; } } return $ok;
} function check_functions(){
global $error; global $lang; $ok = true;
if(version_compare(phpversion(),'5.6.0','<')){ $error[] = sprintf($lang['i_phpver'],phpversion(),'5.6.0'); $ok = false; }
if(ini_get('mbstring.func_overload') != 0){ $error[] = $lang['i_mbfuncoverload']; $ok = false; }
try { random_bytes(1); } catch (\Exception $th) { // If an appropriate source of randomness cannot be found, an Exception will be thrown by PHP 7+ // this exception is also thrown by paragonie/random_compat for PHP 5.6 support $error[] = $lang['i_urandom']; $ok = false; }
if(ini_get('mbstring.func_overload') != 0){ $error[] = $lang['i_mbfuncoverload']; $ok = false; }
$funcs = explode(' ','addslashes call_user_func chmod copy fgets '. 'file file_exists fseek flush filesize ftell fopen '. 'glob header ignore_user_abort ini_get mkdir '. 'ob_start opendir parse_ini_file readfile realpath '. 'rename rmdir serialize session_start unlink usleep '. 'preg_replace file_get_contents htmlspecialchars_decode '. 'spl_autoload_register stream_select fsockopen pack xml_parser_create');
if (!function_exists('mb_substr')) { $funcs[] = 'utf8_encode'; $funcs[] = 'utf8_decode'; }
if(!function_exists('mail')){ if(strpos(ini_get('disable_functions'),'mail') !== false) { $disabled = $lang['i_disabled']; } else { $disabled = ""; } $error[] = sprintf($lang['i_funcnmail'],$disabled); }
foreach($funcs as $func){ if(!function_exists($func)){ $error[] = sprintf($lang['i_funcna'],$func); $ok = false; } } return $ok;
} function langsel(){
global $lang; global $LC;
$dir = DOKU_INC.'inc/lang'; $dh = opendir($dir); if(!$dh) return;
$langs = array(); while (($file = readdir($dh)) !== false) { if(preg_match('/^[\._]/',$file)) continue; if(is_dir($dir.'/'.$file) && file_exists($dir.'/'.$file.'/lang.php')){ $langs[] = $file; } } closedir($dh); sort($langs);
echo '<form action="">'; echo $lang['i_chooselang']; echo ': <select name="l" onchange="submit()">'; foreach($langs as $l){ $sel = ($l == $LC) ? 'selected="selected"' : ''; echo '<option value="'.$l.'" '.$sel.'>'.$l.'</option>'; } echo '</select> '; echo '<button type="submit">'.$lang['btn_update'].'</button>'; echo '</form>';
} function print_errors(){
global $error; if(!empty($error)) { echo '<ul>'; foreach ($error as $err){ echo "<li>$err</li>"; } echo '</ul>'; }
}